AC与radius认证报文分析 WLAN学习资料.doc

AC与radius认证报文分析

1、完整的用户认证通过的报文：
11:03:24.621585IP(tos0x0,ttl246,id15341,offset0,flags[DF],proto:UDP(17),length:44)221.176.1.140.43563>211.143.26.66.2000:[udpsumok]UDP,length16
0x0000:4500002c3bed4000f6117bc5ddb0018c
0x0010:d38f1a42aa2b07d0001837b301010000---------1、portal报文协议版本V1 2、portalserver向AC设备发送请求报文
0x0020:edc800006f08eb2e000000000000

11:03:24.624699IP(tos0x0,ttl64,id0,offset0,flags[DF],proto:UDP(17),length:62)211.143.26.66.2000>221.176.1.140.43563:[udpsumok]UDP,length34
0x0000:4500003e0000400040116da1d38f1a42
0x0010:ddb0018c07d0aa2b002a8e6d01020000----------AC回复portalserver报文
0x0020:edc801566f08eb2e000000010312a4fd------这个值我们经常说的Errcode报文值(也就是AC版本3042出现的问题，errcode为4，3045版本改为1)，00代表认证成功。
0x0030:c027e0b3783afd89edaedb472023

11:03:24.657048IP(tos0x0,ttl246,id15342,offset0,flags[DF],proto:UDP(17),length:75)221.176.1.140.43564>211.143.26.66.2000:[udpsumok]UDP,length47
0x0000:4500004b3bee4000f6117ba5ddb0018c
0x0010:d38f1a42aa2c07d00037be4501030000-------portalserver向AC设备发送请求认证报文
0x0020:edc901566f08eb2e00000002010d3133
0x0030:3937333437313039350412c858c240dd
0x0040:8cdf542f6210cd87eaa995

11:03:24.670339IP(tos0x0,ttl64,id0,offset0,flags[DF],proto:UDP(17),length:215)211.143.26.66.32922>221.176.1.138.datametrics:[udpsumok]RADIUS,length:187
AccessRequest(1),id:0xde,Authenticator:c867d51732134ea8b968b2adf29404b5
VendorSpecificAttribute(26),length:14,Value:Vendor:Unknown(14559)
VendorAttribute:8,Length:6,Value:1.0.12
0x0000:000038df0808312e302e3132
UsernameAttribute(1),length:13,Value:13973471095
0x0000:3133393733343731303935
NASIPAddressAttribute(4),length:6,Value:211.143.26.66
0x0000:d38f1a42
FramedIPAddressAttribute(8),length:6,Value:111.8.235.46
0x0000:6f08eb2e
NASIDAttribute(32),length:18,Value:0014074673100460
0x0000:30303134303734363733313030343630
CallingStationAttribute(31),length:19,Value:00-11-6B-45-33-E9
0x0000:30302d31312d36422d34352d33332d45
0x0010:39
CalledStationAttribute(30),length:24,Value:00-1F-64-E1-56-B7:CMCC
0x0000:30302d31462d36342d45312d35362d4